Static task
static1
Behavioral task
behavioral1
Sample
6adf7be013ac3c0fba7e92b032354b22_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
6adf7be013ac3c0fba7e92b032354b22_JaffaCakes118
-
Size
1.6MB
-
MD5
6adf7be013ac3c0fba7e92b032354b22
-
SHA1
5a174fd6b41efc8709761ba042accb66a457dffe
-
SHA256
108ce59c2d5cb6598bd2398b3a621439c91ee818ba79ec7d32591ff4538757cb
-
SHA512
d9bc9a13fd31e52a95e6f0479b321743c4fd479c3d0d7af422f7e61b222c97015d83d3f073971e90b7f7e3a9d06cfea24d98fe4125a0da3e9cfd7b0199402f10
-
SSDEEP
49152:Uv9XFc8PVk6Vpsz49slPXhGDEGR1tYWg+tVC1IoHnv9:Uv9XFcyL+4qGIC43+vC1pHv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6adf7be013ac3c0fba7e92b032354b22_JaffaCakes118
Files
-
6adf7be013ac3c0fba7e92b032354b22_JaffaCakes118.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 720KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 187KB - Virtual size: 610KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
goryfdzq Size: 752KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
clfxdhoq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE